Liviu Stoian ([EMAIL PROTECTED]):
> I've tried to use Analog to analyse a Squid access.log (ftp-ing the
> logs from a linux server into a W2k station.) It failed. I've tried
> to describe the Squid logformat. I've turned the debug on. What I'm
> doing wrong? Can someone to send me a LOGFORMAT for Squid? Thank you
> in advance. LiviuS
See FAQ item D7: http://analog.sourceforge.net/docs/faq.html#faq197
> Here are my inputs / outputs:
> logformat
> LOGFORMAT ( %U.%j %w %W %W %W %T %w %s %w %j/%j %w %b %w %j %w %r %w %j %w %j %w %j )
> with many variations on the theme, or like this:
> LOGFORMAT ( %U.%j %W%T %s %j/%c %b %j %r %j\n )
> also with lots of variations.
> C: 999598341.938 2657 192.168.101.4 TCP_MISS/200 974 GET
> http://finance.yahoo.com/yHqBcNpBtBhBrBmBdBFg -
> DIRECT/finance.yahoo.com text/html C: * C: 999598369.349 30078
> 192.168.101.4 TCP_MISS/200 31895 GET http etc... etc...
Your logformat starts with a space and the logfile does not appear to.
Try something like this perhaps?
LOGFORMAT (%U.%j %W%T %s %j/%c %b %j %r %j\n)
--
Jeremy Wadsack
Wadsack-Allen Digital Group
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
